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Conditions on sure-success decidability of weights of Boolean functions are presented for a given 
number of generalized Grover iterations. It is shown that the decidability problem reduces to a 
system of algebraic equations of a single variable. For problems that require a large number of 
iterations, it is observed that the iteration number of sure-success quantum algorithms scale as the 
square root of the iteration number of the corresponding classical probabilistic algorithms. It is also 
demonstrated that for a few iterations, quantum algorithms can be more efficient than this. 
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I. INTRODUCTION 



Quantum algorithms have been proved to be exponentially faster than their classical counterparts in problems 
such as Deutsch's problem^, Simon's problem Q and super-polynomially faster in order finding 4]. All of these 
problems have some simplifying features and the quantum algorithms which solve these problems make use of such 
features while exploiting quantum parallelism and, in some cases, entanglement. If there is no such simplifying feature, 
quantum algorithms do not perform this well. Nevertheless, as Grover showed, one can obtain at least a quadratic 
speedup [5|,|6[ for searching a single item in an unstructured database. Unfortunately this small-scale speedup is shown 
to be the upper limit of quantum database search algorithms however wide range of applications compensate 
£ ' for this. 

Several generalizations and variations of Grover's algorithm is explored up to now. In Ref.|H, the problem of searching 
for several items, instead of a single item, is studied. In this case, the algorithm gives one of the solutions randomly 
at the output. In Ref. [(| it is shown that using an arbitrary unitary (instead of the Hadamard transform which were 
used in the original Grover algorithm) does not change the 0(y/N) run-time as long as it is used consistently. If 
there is an inner structure to be exploited, this unitary can be chosen accordingly to obtain quadratic speedup for 
the new search space. Biham et al. further generalized the algorithm such that the initial state [Toj and the phase 



\ inversion angle[ll| are arbitrary and obtained similar results. Grover's original alg orithm is not deterministic, but 
with a few tweaks it is possible to obtain solutions with zero error probability 12, 13]. It docs not monotonically 
converge to a solution (i.e., if you run it too much, it misses the target) but it can also be altered to become a fixed 
, point algorithm (l^. 

■ An important problem related to database search is counting the number of roots of a given Boolean function /. In 
• • \ this problem, the aim is to find the number of inputs x that gives fix) = (or equivalently the number of the roots 
. £h ' °f fi x ) = 1 is sought). Brassard et al. gave a practical method to accomplish this task approximately, by employing 
Grover iteration as well as quantum Fourier transform [l5j]. Another specific problem in which Grover search iteration 
is used is the weight analysis of Boolean functions. The ratio of the number of solutions of f(x) = 1, to the number 
of all possible inputs is called the weight of a function. Weight analysis of Boolean functions has proved to be useful 
in areas such as cryptanalvsis [Tfjj . coding theorypjj, fault-tolerant circuit design[l8|, and for built-in self-testing 
circuits [19|. Weight analysis using Grover algorithm is studied by Braunstein et al. and Choi and Braunstein in a 
series of papers [20, [2l|. They first solve the problem with a restriction where they only consider two "symmetric" 
weights (i.e., the function is known to have a weight either equal to p\ or p 2 = 1 — Pi)- Then they generalize it to 
the asymmetric case where the restriction on the weights is now removed. This task can also be accomplished by 
using quantum counting[15]. However, in that case, one needs to introduce quantum Fourier transform and quantum 
counting is still slightly slower than the weight decision algorithm. 

In this contribution, the weight decision problem is studied by an alternative approach. The main motivation 
is to see which weights could be distinguished by a given number of function evaluations, especially in the regime 
where only a few evaluations are required. As the algorithm devised by Braunstein et al. requires at least 3 function 
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evaluations, the approach used in this article covers an unexplored territory. The organization of the article is as 
follows. Section [XT] starts with a general Grover iteration which consists of unitaries which are more general than the 
Hadamard transform of the original algorithm. The basic definitions are given and an essential theorem is presented 
in this section. The first problem tackled in Section [TTT1 is the decision problem of a zero weight and a non-zero weight. 
After that, the decision problem of two non-zero weights by a few iterations is discussed. Exact solutions are given 
for 1 and 2 iterations. For 3 or more iterations, the associated equations become too complicated and thus we are 
forced to present numerical solutions for a few cases. A brief comparison of classical and quantum efficiencies and a 
comparison to the algorithms of Braunstein et al. are also included in this section. Finally, brief concluding remarks 
are given in section IIV1 



II. PRELIMINARIES AND THE CONSTRUCTION OF THE PROBLEM 



Let us first define the problem. We are given a Boolean function / of N possible inputs 
(/ : {0, 1, • • • , N — 1} — > {0, 1}). We somehow know that the function has either the weight p — r/N or the weight 
p' = r' /N. In other words, the total number of inputs x for which f{x) — 1 is either r or r' . Our job is to de- 
termine which one is the case. Note that by "weight decision problem" we imply the general case which is usually 
"asymmetric" as in [21], that is to say, r + r' is not necessarily equal to N. 

The evaluation is implemented in a quantum computer as a black box. The function evaluator, upon reading the 
input register (which is an ./V-level system), adds the value of the function on the result qubit. Denoting the unitary 
transformation of the function evaluation by Uf we have 

U f \x) I ®\b} R = \x} I ®\b®f(x)} R , (1) 

where I denotes the iV-level input register and R denotes the result qubit. Using the basis \±) R = (\0) R ± |1)#) /V2, 
the action of Uf can also be expressed as 

U f \x±) IR = (±lf x) \ X ±) IR . (2) 

Therefore, when f(x) — 1, the overall phase of the state \x— ) is rotated by tt radians. The phases of the states \x+) 
remain unchanged irrespective of the function /. 

Let A be an ancilla system. Let , . . . , \f3 n ) be a set of orthonormal vectors in the state space of the composite 
system AIR. Consider the following unitary operator S that acts on the composite system 

n 

5=1-2^1/3,) (ft | . (3) 

This operator is essentially an inversion operation in an n-dimensional subspace of the Hilbert space, namely the 
subspace spanned by {|/3i)}i- The successive application of Uf and S constitute a single iteration step Qf = — S(1a® 
Uf). To express the effect of multiple iterations of Qf on an arbitrary initial state, it is convenient to first define an 
n x n matrix C, which will be called as the "cosine matrix" , as 

C {j = (0i\l A ® Uflft) . (4) 

As Uf is unitary with real eigenvalues of ±1, it is also hermitian. This implies that the cosine matrix C is hermitian 
and all of its eigenvalues are in the [— 1, +1] interval. In that case, we can think of C as the cosine of an angle matrix 
0, i.e., C = cos0. Next, we define n x n matrices R( m ) for all integer values m by 

R(m) ^ sin(me) 
sm(B) 

which is actually a polynomial function of C. Note that all of these matrices depend on the function /. When 
necessary, this dependence will be shown by C(/), 0(/) and Bj m )(f). But, the function will not be shown explicitly 
when there can be no confusion. 

We can express our fundamental result in terms of the R/™- 1 matrices as follows. 

Theorem 1. If the initial state is one of \/3i), then, after m iterations of Q t = —S(\a ® Uf), the final state is 

n 

q? i&> = E (i&> ^r +1) - u f i&> rJ 1 ') . (6) 

3=1 
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The proof is rather straightforward. One first verifies Eq. ([6]) for m = and m — 1. After that, showing that the 
matrices R( m ) satisfy the following recurrence relation 

R (m+2) _ 2dR/ m+1 ) - R (m > = , (7) 

and using these in Q™ +1 1/3.;) completes the proof of the theorem. The details are left to the reader. A slightly more 
complicated, but still simple expression can be found for QJ 1 \ifj) for any arbitrary initial state \it>) air- However, that 
general case will not be needed in this contribution. 

The problem is as follows. We prepare the initial state of the input register I, result qubit R and ancilla A in the 
state 

n 

|/3) = £>|A) (8) 

i=l 

where the amplitudes c 2 ; will be determined later. After that, the evaluation of the unknown function / and the 
unitary S are alternatingly applied m times. In other words, Q™ is applied on the composite system. The final state 
of the composite system AIR is 

m = of\0) . (9) 

Finally, a measurement is carried out on the composite system AIR for determining the weight of the function /. 

If this final measurement enables us to measure the correct weight of the function / deterministically (with prob- 
ability 1), then, it is necessary that all final states corresponding to functions with different weights are orthogonal. 
In other words, if / and g are any two functions that could be possibly computed by the black box device, we should 
have ($y|$ 9 ) = whenever / and g have different weights. In this contribution, only the case where the function 
computed by the black box device has either the weight p or p' will be considered. Therefore, if the correct weight 
of the unknown function could be determined after m iterations, then the set of final states |$/) for functions with 
weight p and the corresponding set for functions with weight p' should be in orthogonal subspaces. 

Undoubtedly, how the final measurement is carried out is also important from the computation point of view. 
However, in this contribution, the primary concern is the possibility of distinguishing functions with different weights 
and not how the steps of the algorithm can be implemented. Moreover, the length of the algorithm will be measured 
with the number of evaluations of the unknown function /, presumably because this is very costly. Hence, it is 
assumed that the preparation of the initial state \/3), implementation of the unitary S and the final measurement 
requires a much smaller number of computation steps than carrying out U / . For this reason, we are inclined to find 
only the smallest iteration number m that is necessary for distinguishing two given weights p and p' . 

For the weight decision problem, it appears that the following choice for the |/%) is sufficient. 

1 ^ 



\Pi) = \Pi)AIR = Wi)A ® ^-/^ L \ X ^IR + V 71 - Hi |0+)/fl (10) 

\ * x=0 / 

Here, pi are real parameters between and 1 and the ancilla states \on) A are normalized and mutually orthogonal to 
each other (i.e., (a.i\a,j) — Sij), so that |/3i)atr are a ^ so normalized and mutually orthogonal to each other. In that 
case, the cosine matrix C is diagonal. If the unknown function / has weight p, then the ith diagonal entry of C is 

C« = wa0i(f) = (0i\lA ® Uf\pi) = 1 - 2pm (11) 

The angle eigenvalues are therefore bounded in the interval 

< 6i(f) < arccos(l - 2p) . (12) 

The matrices It'" 1 ) are also diagonal in this case and their ith diagonal entry are given by 

ip(tn) _ sin rofliCf) , s 

R " - sin <?,(/) ■ ( } 

III. RESULTS 

A. Distinguishing zero weight functions from non-zero weight functions 

First, the case where one of the weights is identically zero, p' — is investigated. In this case, the decidability 

T 

of distinguishing a function / with weight p = — and the zero function z (which is defined as z{x) =0 for all x) 
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is studied. In other words, we are given a function / and we are told that either the function / has weight p (but 
otherwise arbitrary) or it is the zero function. We are asked to determine if / is the zero function or not with a 
minimum possible number of function evaluations. Classically, the deterministic algorithms require N(l — p) + 1 
evaluations in the worst case although a single evaluation is sufficient if we are lucky. It is of some interest to see how 
quantum algorithms perform for this problem. 

In this case, U z = 1 and Q z |/Jj) = thus leading to Q™ \/3i) — If all functions with weight p could be 

distinguished from z after to function evaluations, then we should have ($ Z |<I>/) = for all functions / with weight p. 

Q = {<S> z \$ f ) = (P\Qf\P) (14) 

=j2<Wi\Q?m^ (15) 



= < (^ (m+1) (/) - C(m (m) (/)) aj (16) 

ij 

= ^<(cosme(/)) l/j . (17) 

ij 

For any possible iteration number to, the equation above can be satisfied with n — 1 (i.e., S is an inversion in a 
one-dimensional subspace spanned by |/3i)). In this case, 0(/) is a 1 x 1 matrix, which we may denote by the value 
Oi(f). We should therefore have cosm8i(f) = for all functions / with weight p. If the iteration number to is the 
minimum possible value, then #i(/) should be independent of / (the definition of |/3i) in the form in Eq. (fTU)) is 
consistent with this) and should be given by 0\(f) = 7t/2to. The minimum iteration number is, therefore, the smallest 
integer to where we can find a number p\ in [0, 1] interval such that 

7T 

cos - — = 1 — 2ppi . (18) 
2m 



It is then straightforward to show that the smallest iteration number is given by 

m m in (p) 



2arccos(l — 2p) 

where |~y] denotes the smallest integer greater than or equal to y. 



(19) 



m p min (m) 

1 0.5" 

2 0.15 

3 0.067 

4 0.038 

5 0.024 
10 0.0062 



a A special variation of Deutsch-Jozsa algorithm 
TABLE I: Minimum weights of functions, which can be distinguished from the zero function z by the only m function evaluations. 



One can also ask the reverse question: which weights p can be distinguished by to iterations? In that case, the 
condition on the weights is found to be 

9 > PminM = i (l - cos ^-j . (20) 

For a few small to values, the threshold weights p m in are tabulated in Table HI 

It appears that, with a single function evaluation (i.e., to = 1) any function / with weight p can be distinguished 
from the zero function z provided that p > 1/2. This special case corresponds to a variation of the Deutsch-Jozsa 
problem [2(. In the Deutsch-Jozsa problem, one needs to distinguish functions / with weight p = 1/2, from the constant 
functions z and u where u = z 1 (i.e., u(x) — 1 for all x). 

If the weight p is smaller than 1/2, more than one function evaluations are necessary. As it will be discussed 
below, when the weights to be distinguished p and p' are closer to each other, more function evaluations are needed 
to identify the weight correctly. This is also the case for the current problem: when p <C 1, one needs to ~ 7r/4^/p 
function evaluations in order to distinguish the weight p from the weight p' = 0. 
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B. Distinguishing two non-zero weights 

Now, consider the problem of identifying the weight of the function when both of the possible weights p and p' are 
non-zero. For simplicity, let us consider the choices in Eq. (ITU1) so that the angle matrices O are diagonal. Let / and 
g be two functions with respective weights p and p' . The inner product of the final states is given by 

n i 

<*/!**> = EN' 4 m+1) (/)4 m+1) (.9)-4 m+1) (/)4 m) (5)cos^ ; ( 5 ) 

i=l ^ 

-R^\f)R^ +1 \g)cose t (f) + R^(f)R^(g)co S i (f®g)"j = . (21) 

Consider the last term inside the sum of Eq. (|2Tj) . The matrix element can be evaluated as 

2t 

CQB9 i (J@g) = (p i \lA®Uf m g\Pi)=l-Hijj , (22) 

where t is the number of inputs which make / © g one, i.e., t/N is the weight of the function f®g. For all possibilities 
for / and <?, t can take on the values t = r — r', r — r' + 2, . . . , r + r' — 2, r + r'. As Eq. (|2ip is linear in t, the condition 
in Eq. (|2ip is reducible to two independent equations 

n 

En 2 ^* = 

i=l 
n 

EM 2b > = ( 23 ) 

i=l 



subject to the condition 



where Aj and i?i are given as follows: 



EN 2 = 1 ' ( 24 ) 



A. t = cos(m%) cos(mfl ig ) + \ . 1 gj (l - cos(%) cos(g tg )) (25) 

sin sin 

sm(m9 if ) sm(m6ig) , , 

Bl = sinfl °™f) 2-cos%-cos^ g . (26) 

sin (7i r sin uig 

Therefore we have to find n tuplets (Ai,Bi), which are just points on the 2-dimensional plane such that 
J2i l c i| 2 (Ai,Bi) = (0,0). Geometrically, this means that the origin (0,0) is in the convex hull of the set of points 

{(■■I,. /;,:!. 

Note that, with the choice in Eq. (|10[) . Ai and Bi depend only on the fixed parameters m, p and p'; and the 
adjustable parameter Keeping the dependence on the fixed parameters as implicit, and showing the dependence 
on /Xj explicitly we can write Ai — A(pi) and Bi — B(/ii). Therefore, the set of points (Ai,Bi) lie on a continuous 
curve (A(n), B(p)). The weights can be distinguished, therefore, if the origin, (0,0), is inside the convex hull of the 
whole curve (A(fi), B{fi)) for < fj, < 1. In such a case, the problem can be solved with n — 2, i.e., one needs to 
find only two points on the curve (A(p,), B{p)) such that the line joining them passes from the origin. The associated 
values of p\ and p 2 enables us to find \(3\) and |/?2). 

Therefore, the distinguishability problem of two weights p and p' with m function evaluations reduces to a problem 
in convex analysis: determining whether a point lies within the convex hull of a curve. Both coordinates of the curve 
(A(fj), B(/j,)) are actually polynomial functions of p, 

A(p) = T m (y)T m (y') + U m ^(y)U m ^(y')(l - yy') (27) 
B(ii) = 2( P + p')U m ^ 1 (y)U m - 1 {y')n (28) 

where T m and U m denote the Chebyshev polynomials that are defined by T m (t) = cos(m arccos(t)) and U m -i(t) = 
— 4zT m (t) and y = 1 — 2pp, y' = 1 — 2p'p. However, determining whether the origin lies in the convex hull of the 
curve is a complicated problem which can only be solved numerically in most cases. 
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FIG. 1: B((i) vs. A(p) for m = 2, p = .95 and p' = 0.45 



The case with m = 1 is the simplest. In that case, = 1 for all /z and therefore the origin can never be in the 

convex hull of the associated curve. This implies that, it is not possible to distinguish two weights which are both 
different from or 1 by a single function evaluation. 

The curve for the case m = 2, p = .95 and p' — 0.45 is shown in Fig. [T] In this example, we can see that the 
parametric curve have (A,B) = (1,0) at pb = 0, which turns out to be the case for all situations. However, where the 
curve ends is nontrivial. If it cuts the horizontal axis again in the negative part of the axis, a convex combination 
that gives the origin is easily achieved. This simplification covers most of the solution space and can be utilized for a 
quick analysis. For a complete analysis one has to find compact inequalities for p and p' . In order to understand the 
general case, m = 2 case is studied first. 



1. The case where m = 2 



For m — 2, A(p) and B(p) becomes 

A^(n) = l-^ 2 {p~ P ') 2 (29) 
£?( 2 >(,j) = 2p(p + p')(l-2pp)(l-2pp') (30) 

where we introduced superscripts to emphasize m — 2. Now we require that there exists two points (A^(/xi), (pi)) 
and (A^(p 2 ),B ( - 2 Hp 2 )) such that 



E n 2 f 

z=l,2 \ 



2 ( A^(p l )\ = ( 

s (2) (^)/ lo 



(31) 



To do this, we must find two values, p\ and p 2 , satisfying ([32]) 

B (2 Vi) = B^(p 2 ) 
A(2)( Ml ) A(2)(/i 2 ) 



(32) 



where B^ 2 \fii) and B^ 2 \pL2) (and, in parallel, A^(pi) and A^ 2 \p,2)) have opposite signs. It turns out that if there 
is a solution to Eq. (|32p . it can be realized with a single variable fix, while fi 2 is set to 1. Hence, we get 



B {2 \p)A {2 \l) - A {2 \p)B {2 \\) = (Kp 2 + Lfi + M) (fi - 1) = 



(33) 



where 



M 



K 



L 



4pp' (1 - 8(p- p') 2 ) 
8(p-p') 2 +4pp'-5 
(2p-l)(2p'-l) . 



2(p + P') 



(34) 
(35) 
(36) 



Let A = L 2 — 4KM be the discriminant of this quadratic equation. Suppose that p > p' . All of the following conditions 
have to be satisfied for being able to distinguish these two weights: p/p' > 1 + l/\/2, p > 1/2, p — p' > l/2-\/2, and 
A > 0. The conditions for the case p < p' can be obtained simply by using p— p' symmetry. These conditions are found 
analytically using Eq. (|3"3")l and by inspecting all possible orderings of the zeros and poles of B^{fi)/A^ 2 ' (fi). However, 
even for m = 2, the equation for the conditions on p and p' requires solving a quadratic equation. Calculations for 
bigger m are even more forbidding and therefore numerical computations had to be utilized instead. Numerical results 
for m = 2 case is pictured in Fig. [5] among further results from m = 3 to m = 8. 



Basically the same procedure can be followed for m > 2. Solving Eq. (I3"2l would be more and more challenging 
analytically with increasing m. Fortunately this problem is suitable for numerical analysis. Note that solving this 
problem directly, without applying Theorem[T]is also possible, however in that case we would have needed to optimize 
|/?i)'s. In this formulation, there is only one parameter, p, to be optimized and this is a clear advantage. 

In Fig. [21 numerical results showing decidability of weights with several iterations (m = 2 to m = 8) are plotted. 
It can be seen in the figure that, with each run, more weight combinations can be distinguished. However the rate of 
addition of distinguishable weight combinations decreases rapidly with each m. 

Notice that for any number of iterations, the area corresponding to distinguishable weights is symmetric with respect 
to p = p' line since we start with the same initial states and we take the inner product of the final states. On the 
other hand we may expect one more symmetry. The problem of distinguishing p and p' should be no different than 
distinguishing 1 — p and 1 — p' because flipping function outputs does not change the complexity of the problem, thus 
the figure should also have been symmetric with respect to the other diagonal. However possible advantageous output 
flips does not come out naturally as solutions in our formalism. This is also a strong indication for the non-optimality 
of the solutions provided in this contribution. 

A quick but rough analysis can be made for comparing the efficiencies of classical and quantum algorithms. Clas- 
sically, with a non-probabilistic algorithm we need to make 



queries in the worst case. However we can do better with a probabilistic algorithm. In such an algorithm, the weight 
can be estimated by computing the function / for s random inputs. To be able to distinguish two weights p and 
p', the variance of the estimate should be smaller than |p — p'\. For large N, this process can be approximated as a 
binomial process, which leads to a value of 



evaluations. In the quantum case, a quick estimate of minimum evaluation number can be obtained as follows: since 
the (A, B) curve always starts at the point (1,0), we can only look if this curve intersects with the negative A axis. 
For large m, this approximation is good enough for estimating the order of the run-time of the algorithm. Thus we 
look for the roots of B and see if the value of A can be negative at these roots. As can be seen from Eq. (f26|) either 
mOif or mOig is an integer multiple of 7r at the roots of B. The value of A can be negative for these cases only if 
\m9if — m9i g \ > ~. Since we are dealing with weights that are close to each other, we can linearize the expression 
and finally obtain 



2. General case 



nici^et ~ N(l - |p- p'|) 



(37) 




(38) 
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FIG. 2: Solutions for m = 2 to m = 8. Darker areas correspond to higher m values and lighter areas correspond to lower 
m values. Lightest region is for m = 2. The disc-like black region on the diagonal corresponds to weight pairs that have no 
solutions with m < 8 iterations. 

A comparison of Equations (|38[) and (|39[) indicate that a quadratic speedup is obtained by using Grover iterations 
for the weight distinuishability problem. This result is compatible with the bounds given for the Grover algorithm 
041, EH and Choi and Braunstein's algorithm s f20L l2l| . 

A comparison of the approaches given in [20l l2ljj and the approach in this article is also in order. Even though both 
are sure-success and achieve a square-root speedup, the algorithm given in Refs. [2(3 and l2ll needs ml ~ (it/2)/\p — pl\ 
iterations in the limit where p approaches p' . For moderate values of the weights, that number is only slightly bigger 
than this article's result of Eq. (|31?|) . However, their algorithm specifies a complete algorithm that solves the problem 
exactly, while the study presented in this letter lacks such a clearly constructed algorithm. A special case where 
our approach becomes useful is those weights where only m = 1 or m = 2 function evaluations are necessary for 
distinguishability. On the other hand in Refs. [2(3 and[2l|, at least three evaluations are needed. 

IV. CONCLUSIONS 

The sure-success weight decision problem of Boolean functions using generalized Grover iterations is discussed. 
Specifically, the pairs of weights that can be distinguished by m = 1 or m = 2 function evaluations are analyzed in 
detail. The decidability problem is reduced to a problem of determining if a point lies in the convex hull of a curve, 
where the curve is defined by polynomial functions whose order increases with the increasing number of iterations m. 
As a result, only for cases with very small m one can obtain analytical expressions. For m > 3, it becomes necessary 
to follow the numerical approach. 

This analysis may be compared with Braunstein and Choi's works |20l.l2lT] and with quantum counting [15]. Braun- 
stein and Choi have shown that their algorithm is 4 times faster than quantum counting 2 lj. Being in parallel with 
their result and the known bounds in the literature, we also show that quadratic speedup is obtained for large values 
of the number of iterations. 
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